AI-Driven Development Is Changing the Risk Equation

AI is transforming how financial institutions build and ship software. Developers are moving faster, consuming more open source, and delivering applications at unprecedented speed.

But there is a growing gap between development velocity and software security.

As AI accelerates code production, it can also accelerate dependency intake, increase the number of known CVEs across the estate, and shorten the window between vulnerability discovery and exploitation. What was once a vulnerability management challenge is becoming a board-level resilience issue.

Join Chainguard for an intimate dinner bringing together senior security, engineering and technology leaders from across financial services to discuss how to embrace AI-driven development without losing control of the software supply chain.

The Conversation

Financial institutions are under increasing pressure to reduce exploitable vulnerabilities while continuing to innovate.

Major US financial institutions are already treating CVE reduction as a strategic priority for CISOs and CIOs. That pressure is now reaching the UK and EMEA - and is increasingly relevant to banks and regulated enterprises across the GCC.

The question is no longer simply how quickly can we patch?

It is:

How do we build and maintain software that is secure by design, resilient by default, and capable of keeping pace with AI-driven development?

Over dinner, we will explore how organisations can move from reactive vulnerability management towards proactive software supply chain control - reducing risk without slowing developers down or creating additional operational burden.

What We'll Discuss

• AI and the expanding software attack surface - How AI-assisted development is changing developer velocity, open source consumption, dependency intake and the volume of vulnerabilities organisations need to manage.
• From CVE management to organisation resilience - Why vulnerability reduction is moving beyond the security team and becoming a strategic concern for CIOs, CISOs, boards and risk leaders.
• The shrinking exploitation window - Regulators, including the Bank of England, are warning that AI may increase malicious actors' ability to attack financial institutions and reduce the time required to exploit vulnerabilities.
• Moving security upstream - What would it take to shift from scanning and patching after the fact to controlling software risk earlier in the development lifecycle?
• Velocity without compromise - How can security teams give developers the freedom to build faster while maintaining meaningful control over the software supply chain?

Questions for the Room:

1. As AI tools accelerate developer output and open source consumption, how confident are you that your current vulnerability management processes can scale at the same place?
2. What would have to be true for you to feel genuinely in control?
3. As AI shrinks the window between vulnerability discovery and exploitation, how is this changing the conversation at board and C-suite level?
4. What would it take to move CVE management upstream - and where are the biggest organisational or technical barriers?
5. Were does your organisation currently sit between developer velocity and software supply chain control, and are you comfortable staying there as AI-driven development becomes the norm?

An Evening of Candid Conversation

This is not a conference or a product presentation.

It is a small, invitation-only dinner designed for frank discussion among peers facing the same challenges: balancing innovation, regulatory expectations, developer productivity and software resilience. 

Expect practical perspectives, candid debate and an opportunity to compare approaches with leaders across the financial services community.